Installation de PhpMyFaq sur Ubuntu 22.04
De www.yakakliker.org
Installation du système
Installation des tools nécessaires au bon fonctionnement
sudo apt-get install build-essential linux-headers-$(uname -r)
sudo apt-get install net-tools
Installation de Webmin
curl -o setup-repos.sh https://raw.githubusercontent.com/webmin/webmin/master/setup-repos.sh
sh setup-repos.sh
apt-get install webmin
Installation du SD-WAN Zerotier
curl -s https://install.zerotier.com | sudo bash
curl -o Zerotier.sh https://raw.githubusercontent.com/Yakakliker37/Base_info/main/Zerotier.sh
sh Zerotier.sh
Installation des pré-requis nécessaires
sudo apt-get install apache2 -y
sudo systemctl enable apache2
sudo apt-get install mariadb-server -y
sudo apt-get install php libapache2-mod-php -y
sudo apt-get install php-{ldap,imap,apcu,xmlrpc,curl,common,gd,json,mbstring,mysql,xml,intl,zip,bz2}
sudo a2enmod ssl
sudo systemctl reload apache2
Configuration de la base de données
sudo mysql_secure_installation
NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB
SERVERS IN PRODUCTION USE! PLEASE READ EACH STEP CAREFULLY!
In order to log into MariaDB to secure it, we'll need the current
password for the root user. If you've just installed MariaDB, and
haven't set the root password yet, you should just press enter here.
Enter current password for root (enter for none):
OK, successfully used password, moving on...
Setting the root password or using the unix_socket ensures that nobody
can log into the MariaDB root user without the proper authorisation.
You already have your root account protected, so you can safely answer 'n'.
Switch to unix_socket authentication [Y/n] Y
Enabled successfully!
Reloading privilege tables..
... Success!
You already have your root account protected, so you can safely answer 'n'.
Change the root password? [Y/n] Y
New password:
Re-enter new password:
Password updated successfully!
Reloading privilege tables..
... Success!
By default, a MariaDB installation has an anonymous user, allowing anyone
to log into MariaDB without having to have a user account created for
them. This is intended only for testing, and to make the installation
go a bit smoother. You should remove them before moving into a
production environment.
Remove anonymous users? [Y/n] Y
... Success!
Normally, root should only be allowed to connect from 'localhost'. This
ensures that someone cannot guess at the root password from the network.
Disallow root login remotely? [Y/n] Y
... Success!
By default, MariaDB comes with a database named 'test' that anyone can
access. This is also intended only for testing, and should be removed
before moving into a production environment.
Remove test database and access to it? [Y/n] Y
- Dropping test database...
... Success!
- Removing privileges on test database...
... Success!
Reloading the privilege tables will ensure that all changes made so far
will take effect immediately.
Reload privilege tables now? [Y/n] Y
... Success!
Cleaning up...
All done! If you've completed all of the above steps, your MariaDB
installation should now be secure.
Thanks for using MariaDB!
mysql -u root -p
create database phpmyfaqdb character set utf8 collate utf8_bin;
grant all privileges on phpmyfaqdb.* to phpmyfaq@localhost identified by 'Mot_de_passe';
flush privileges;
quit
Installation de Phpmyfaq
wget https://download.phpmyfaq.de/phpMyFAQ-3.1.11.tar.gz
tar -xzvf phpMyFAQ-3.1.11.tar.gz
sudo mkdir /var/www/phpmyfaq
sudo cp -R phpmyfaq/* /var/www/phpmyfaq/
sudo chown -R www-data:www-data /var/www/phpmyfaq
sudo chmod -R 775 /var/www/phpmyfaq
Sécurisation du serveur web
mkdir /etc/ssl/phpmyfaq/
cd /etc/ssl/phpmyfaq/
openssl genrsa -des3 -out phpmyfaqCA.key 2048
Enter PEM pass phrase:
Verifying - Enter PEM pass phrase:
openssl req -x509 -new -nodes -key phpmyfaqCA.key -sha256 -days 3650 -out phpmyfaqCA.pem
Enter pass phrase for phpmyfaqCA.key:
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:FR
State or Province Name (full name) [Some-State]:DS
Locality Name (eg, city) []:City
Organization Name (eg, company) [Internet Widgits Pty Ltd]:SERVICE
Organizational Unit Name (eg, section) []:IT
Common Name (e.g. server FQDN or YOUR name) []:phpmyfaq
Email Address []:admin@phpmyfaq.loc
openssl x509 -in phpmyfaqCA.pem -inform PEM -out phpmyfaqCA.crt
openssl genrsa -out wildcard.phpmyfaq.key 2048
openssl req -new -key wildcard.phpmyfaq.key -out wildcard.phpmyfaq.csr
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:FR
State or Province Name (full name) [Some-State]:DS
Locality Name (eg, city) []:City
Organization Name (eg, company) [Internet Widgits Pty Ltd]:SERVICE
Organizational Unit Name (eg, section) []:IT
Common Name (e.g. server FQDN or YOUR name) []:phpmyfaq
Email Address []:admin@phpmyfaq.loc
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:
nano wildcard.phpmyfaq.ext
authorityKeyIdentifier=keyid,issuer
basicConstraints=CA:FALSE
keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
subjectAltName = @alt_names
[alt_names]
DNS.1 = *.phpmyfaq.yakakliker.org
openssl x509 -req -in wildcard.phpmyfaq.csr -CA phpmyfaqCA.pem -CAkey phpmyfaqCA.key -CAcreateserial -out wildcard.phpmyfaq.crt -days 3650 -sha256 -extfile wildcard.phpmyfaq.ext
Certificate request self-signature ok
subject=C = FR, ST = DS, L = City, O = SERVICE, OU = IT, CN = phpmyfaq, emailAddress = admin@phpmyfaq.loc
Enter pass phrase for domaintestCA.key:
Configuration du VHOST Apache
sudo nano /etc/apache2/sites-available/phpmyfaq.conf
<VirtualHost *:80>
DocumentRoot /var/www/phpmyfaq
ServerName phpmyfaq
Redirect permanent / https://phpmyfaq/
ErrorLog ${APACHE_LOG_DIR}/phpmyfaq_error.log
CustomLog ${APACHE_LOG_DIR}/phpmyfaq_access.log combined
</VirtualHost>
<VirtualHost *:443>
ServerAdmin admin@example.com
DocumentRoot /var/www/phpmyfaq
ServerName phpmyfaq
SSLEngine On
SSLCertificateFile /etc/ssl/phpmyfaq/wildcard.phpmyfaq.crt
SSLCertificateKeyFile /etc/ssl/phpmyfaq/wildcard.phpmyfaq.key
<Directory /var/www/phpmyfaq>
Options FollowSymlinks
AllowOverride All
Require all granted
</Directory>
ErrorLog ${APACHE_LOG_DIR}/phpmyfaq_error.log
CustomLog ${APACHE_LOG_DIR}/phpmyfaq_access.log combined
</VirtualHost>
sudo a2enmod ssl
sudo ln -s /etc/apache2/sites-available/phpmyfaq.conf /etc/apache2/sites-enabled/phpmyfaq.conf
sudo systemctl restart apache2
Lancer la fin de l'installation via l'adresse https://ip_du_serveur/
